$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d6078587-f808-482d-a59a-9f633e92e39d.roa File: d6078587-f808-482d-a59a-9f633e92e39d.roa (raw, json) Hash identifier: iAZkBir0cAR2tEfTKnXotocn9pVspHdm5ygbiUlwZ6U= Subject key identifier: 29:E5:72:CC:F6:BD:14:A7:5B:4A:0E:2F:94:AB:62:4D:49:96:8A:38 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 53B011ECBF5454F6E6D056B86AD40C81BBA29487 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d6078587-f808-482d-a59a-9f633e92e39d.roa Signing time: Sat 24 Oct 2026 01:20:11 +0000 ROA not before: Sat 24 Oct 2026 01:20:11 +0000 ROA not after: Fri 22 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 52.95.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:b0:11:ec:bf:54:54:f6:e6:d0:56:b8:6a:d4:0c:81:bb:a2:94:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 24 01:20:11 2026 GMT Not After : Jan 22 23:59:59 2027 GMT Subject: serialNumber=6176b4a66d1f0ea0f703cb2e99c2206515524700d511db45d332ca0daea9c55f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e3:00:6c:48:34:5c:54:76:08:78:cd:ba:2e: 66:e6:4b:d7:4b:3e:fc:8a:78:53:34:24:a3:6e:53: 7d:6e:85:20:09:ea:d4:87:06:4e:df:c2:f6:61:f2: d7:5d:cd:0b:f9:05:84:9d:eb:a9:8b:9b:a3:92:e4: 68:55:bc:43:8a:30:08:ee:c8:a0:72:98:b0:c7:56: 7f:bd:24:d0:28:1d:de:65:fa:0e:fd:2b:14:16:15: 15:f9:aa:06:95:3d:7c:db:22:29:ba:50:37:a0:bb: 17:a1:90:9e:54:57:21:ac:b7:ac:b3:11:36:f8:8d: 88:76:0f:b4:5d:29:85:0b:5e:9e:dc:21:06:17:a6: ba:a9:b1:97:b7:be:fb:47:eb:2e:df:9f:a0:91:ec: 8c:2e:74:dc:21:da:1e:97:f8:4a:7c:54:5e:6b:1f: 67:b3:eb:93:e1:38:4a:c9:2f:83:07:65:51:5c:aa: 69:fb:a2:f7:5c:64:6b:e3:d2:46:d3:9f:eb:4c:64: fd:55:99:67:e9:a3:3a:21:11:9b:8a:8b:d2:28:e2: a2:c3:f2:05:31:9e:c0:ef:84:10:54:55:b2:83:2e: 36:a3:62:d1:d7:af:15:e5:29:0f:19:e8:29:1b:a7: b4:e2:a3:c5:c4:a4:51:8f:c4:c4:c6:8b:fd:4f:58: f3:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:E5:72:CC:F6:BD:14:A7:5B:4A:0E:2F:94:AB:62:4D:49:96:8A:38 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d6078587-f808-482d-a59a-9f633e92e39d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.95.225.0/24 Signature Algorithm: sha256WithRSAEncryption 26:22:cd:83:62:62:2a:13:32:0b:31:d7:b7:4c:f7:9c:d3:09: 0c:74:c5:69:8b:59:d2:ea:ef:e4:bf:79:8d:eb:b9:c9:4f:ce: 41:f9:56:c9:9b:6d:1e:f9:03:eb:02:74:93:89:6b:3b:59:80: ce:55:8e:46:c5:43:9e:b1:3d:7d:42:75:43:dc:ba:24:77:92: 2c:ad:d9:93:9b:83:e4:7c:b3:28:83:fa:c0:a2:4e:32:b7:b5: dd:a0:eb:23:fa:77:db:82:a4:ef:cc:99:31:12:59:bb:ad:a9: 6f:42:27:c2:78:ce:56:64:ff:d4:80:93:0e:6d:32:aa:da:c4: bf:34:07:3c:0a:40:45:d0:9d:24:06:6a:7f:61:35:bb:68:36: c5:9d:8e:85:51:81:06:b7:0d:7e:09:d1:a4:b6:9c:58:66:b8: 89:f2:b8:0e:51:66:f5:f6:3a:60:b7:c6:37:96:2f:31:c0:b6: 18:42:ea:d9:ba:5f:1b:a5:95:58:99:f2:4a:4d:c0:ec:69:7e: 6c:7d:c5:ed:3d:59:11:28:fd:4f:10:54:41:78:60:4d:99:75: 58:29:54:cd:47:f6:43:03:84:1f:04:1f:bd:7d:57:74:8e:72: 30:ff:e7:9a:f4:68:98:70:e7:22:cb:55:b2:15:6f:50:ad:0c: f8:a2:26:1f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUU7AR7L9UVPbm0Fa4atQMgbuilIcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDI0MDEyMDExWhcNMjcwMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A2MTc2YjRhNjZkMWYwZWEwZjcwM2NiMmU5OWMyMjA2NTE1 NTI0NzAwZDUxMWRiNDVkMzMyY2EwZGFlYTljNTVmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDW4wBsSDRcVHYIeM26LmbmS9dLPvyKeFM0JKNuU31uhSAJ 6tSHBk7fwvZh8tddzQv5BYSd66mLm6OS5GhVvEOKMAjuyKBymLDHVn+9JNAoHd5l +g79KxQWFRX5qgaVPXzbIim6UDeguxehkJ5UVyGst6yzETb4jYh2D7RdKYULXp7c IQYXprqpsZe3vvtH6y7fn6CR7IwudNwh2h6X+Ep8VF5rH2ez65PhOErJL4MHZVFc qmn7ovdcZGvj0kbTn+tMZP1VmWfpozohEZuKi9Io4qLD8gUxnsDvhBBUVbKDLjaj YtHXrxXlKQ8Z6Ckbp7Tio8XEpFGPxMTGi/1PWPNRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUKeVyzPa9FKdbSg4vlKtiTUmWijgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Q2MDc4NTg3LWY4MDgtNDgyZC1hNTlhLTlmNjMzZTkyZTM5ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0X+EwDQYJKoZIhvcNAQELBQADggEBACYizYNiYioTMgsx17dM95zTCQx0 xWmLWdLq7+S/eY3ruclPzkH5VsmbbR75A+sCdJOJaztZgM5VjkbFQ56xPX1CdUPc uiR3kiyt2ZObg+R8syiD+sCiTjK3td2g6yP6d9uCpO/MmTESWbutqW9CJ8J4zlZk /9SAkw5tMqraxL80BzwKQEXQnSQGan9hNbtoNsWdjoVRgQa3DX4J0aS2nFhmuIny uA5RZvX2OmC3xjeWLzHAthhC6tm6XxullViZ8kpNwOxpfmx9xe09WREo/U8QVEF4 YE2ZdVgpVM1H9kMDhB8EH719V3SOcjD/55r0aJhw5yLLVbIVb1CtDPiiJh8= -----END CERTIFICATE-----Generated at Sun Nov 8 05:30:01 2026 by rpki-client